Health and dietary information: dietary requirement and health information, including requests for specific assistance, in connection with your use of our products and services

Payment details: such as details of your credit or debit card number and expiry date

Your use of our products and services: such as your use of our inflight entertainment systems and any related products and services, CCTV images captured in airport lounges that are operated by our partners and on-board, and your previous travel arrangements with us

Our interactions with you: such as any feedback, complaints, compliments, claims you have made (such as in relation to lost luggage), responses to market surveys, records of any correspondence and interactions with us and our staff (including in person, online, by telephone or email and via social media)

Your interests: such as destinations you have visited and products you have bought

Website and mobile apps: if you use our website or mobile applications, your geo-location, IP address, mobile telephone number or ID, and details of how you use the website or app and any third party sites that you have accessed from them

Club Jetstar and My Jetstar accounts: your membership details and details of your participation in Club Jetstar or My Jetstar account. If you are a member of, or use, Club Jetstar or have a My Jetstar account, see Club Jetstar and My Jetstar accounts section below for more information about the data we collect connected to your membership or account

Other programs and clubs: your membership number and details of your participation in Qantas Group or partner programs and clubs.

Employment information: if you are an employee or other person travelling or obtaining products or services in relation to one of our corporate, business or government clients, certain information about your employment or relationship with our corporate or government clients such as your employer’s name, your employee number, your professional title and your work contact information

Incidents: details about any incidents that you are either involved in or that you witness, in connection with your flight or any of our products or services

Wifi use: if you use wifi onboard our aircraft, we collect information about you, your device and how you use the wifi service

Certain aspects of your personal information, for example details of your travel documentation, payment details and contact information, are required for many of our products and services and if you fail to supply such information as requested for specific services, we may be unable to provide you with the products and services in full.

Sensitive personal information

Under privacy laws, certain categories of personal information are considered particularly sensitive and therefore as needing additional protection. These categories include information about health, racial or ethnic origin, political opinions, religious beliefs, trade union membership or your sexual orientation. Sensitive information may also include genetic and biometric data. Information concerning criminal convictions and offences is also viewed as sensitive, for example, under European data protection law.

We may collect and handle your sensitive personal information, for example, when you request special medical or access assistance or if you tell us you have specific dietary requirements relating to your religious beliefs.

We will ask you for your consent to handle this type of personal information, to the extent required under applicable laws, for example under the Australian Privacy Act or the European General Data Protection Regulation.

How we collect personal information

How we collect personal information about you will depend on our relationship or interactions with you.

Directly from you

We mainly collect information directly from you, for example, when you use our website or social media, you call or write to us, we interact with you in person, such as when you use our products and services or participate in promotions.

Indirectly

There may be occasions when we collect information about you from someone else, such as:

Partners participating in Club Jetstar

Travel agents, booking agents and other airlines, including when you make an inquiry but do not complete a booking

When someone else books or purchases good or services on your behalf

Our service providers

Airports and their service providers

Freight and associated service providers

Third parties that provide us with marketing leads

Immigration, customs, border, security, law enforcement and other government and regulatory authorities

Other Jetstar branded entities and the Qantas Group

Businesses for whom we provide marketing and data analysis services

Providers of third party websites, apps and social media platforms

Jetstar MasterCard issuer/manager

If you provide us with information about other individuals, regardless of whether you are travelling together, you are responsible for telling those individuals and letting them know that they can find a copy of this Privacy Policy on our website.

How we use your personal information

We may use your personal information for the following purposes:

To provide and administer our travel products and services: to verify your identity, to contact you about your orders and bookings and travel, freight and other arrangements, to process payments, for quality assurance and training purposes, such as training our staff, testing our systems, and managing our suppliers.

For marketing purposes: to provide you with updates and offers, if you have chosen to receive these; to operate our competitions, promotions and events; to distribute our newsletters and other communications. We may also use your information for marketing Jetstar and our selected business partners’ products and services to you by post, email, SMS, phone and, where required by law, we will ask for your consent at the time we collect your data to conduct any of these types of marketing. We will provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent to you.

To provide customer support: to handle queries, complaints and claims.

To comply with our legal obligations and for safety and security purposes: to ensure the safety and security of all passengers when travelling with us, including investigating security and screening issues. We may process your personal information to comply with our regulatory requirements including in relation to immigration, customs and security or dialogue with regulators, as applicable, which may include disclosing your personal information to third parties, the court service, regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so.

To operate and facilitate your participation in Club Jetstar: if you are a member of Club Jetstar or have a My Jetstar account, we will use personal information that we collect about you to ensure that you get the benefit of Club Jetstar’s and our partners’ programs and clubs, including to track your and record your usage of benefits. Partners participating in Club Jetstar, may also use your personal information to facilitate your participation in Club Jetstar.

To conduct market, consumer and other research: to improve our products, services and marketing activities, including our websites, and to generate consumer insights that help us to market more efficiently and to be more relevant to you.

To ensure website content is relevant: including to ensure that content from our websites is presented in the most effective manner for you and for your device, which may include automated decision making and passing your data to business partners, suppliers and/or service providers.

We may also combine the information that we collect and hold about you.

Disclosure of personal information

We may disclose your personal information to third parties in connection with:

goods and services that you have bought through us or that we provide to you

the operation of, and your participation in, Club Jetstar

the operation of, and your participation in, your My Jetstar account

our legal obligations, responding to complaints and claims, investigating any activity that we suspect to be fraudulent

security, customs and immigration purposes

your interest in our securities

including:

Other carriers on your itinerary so they can provide goods and services to you

Partners participating in our Club Jetstar to allow you to receive offers and benefits in Club Jetstar

Operators of other programs and clubs to allow you to receive offers and benefits in their programs and clubs

various law enforcement agencies, regulatory authorities and governments around the world and their service providers

such other third parties mentioned in the “How we use your personal information” section above

Information technology services such as data storage, passenger and freight booking and distribution systems, communication networks, software and system development, maintenance and support, incident investigation and resolution, and information processing, analysis and reporting

Investigating and responding to incidents

We may disclose your personal information to comply with our legal obligations, respond to complaints and claims, and investigate and protect ourselves and third parties against any activity that we reasonably suspect to be fraudulent. We may also disclose your personal information to law enforcement agencies, regulatory authorities and governments around the world and their service providers in connection with their investigations, screening or other functions.

We may transfer your information between our related bodies corporate and other Jetstar branded entities that are not related bodies corporate of Jetstar, some of which are located overseas in Vietnam, Hong Kong, Singapore and Japan. Jetstar branded entities comply with this Privacy Policy.

Travelling for work

If you are travelling under a travel agreement with our corporate, business or government clients we may collect information about your role with the client or member. For example, your employment type, your role and title, your employee number, your start date with the client and your travel arrangements.

We may disclose your travel details and any information associated with your travel (such as incident reports) to the client or member.

Marketing purposes: your preferences, marketing subscriptions, interests and details of other memberships you may have.

Total Savings and purchase behaviour: including flight and ancillary prices, discounts and products offered to you and received by you.

Logged in members with a My Jetstar account who use jetstar.com

We may collect logs of your use of jetstar.com while you have logged in. This information may include date and time of visit, Club Jetstar membership status, surname, location and actions, for example, pages viewed, and pages submitted.

How we collect information

We collect personal information about you as a member of Club Jetstar through your registration and participation in Club Jetstar.

We may collect information directly from you through our interactions with you. We may also collect information from others who interact with us on your behalf, our related bodies corporate, Jetstar branded entities and the Qantas Group.

We may also collect information from public sources (for example, Census data) and combine this information with information that we hold about you.

How we use your personal information

Providing and marketing enhanced products and services

We use your personal information to personalise the way we provide and market enhanced benefits, products and services to you. We aim to enhance the way you use Club Jetstar, the website and marketing communications by understanding your preferences, interests and hobbies.

We may also market the products and services of our partners and other third parties who we believe may have products and services in which you would be interested.

General administration of Club Jetstar

We use the information we hold about you to administer Club Jetstar. These activities include:

assessing your membership applications

confirming your eligibility to participate in, and receive the benefits, goods and services, associated with Club Jetstar

investigating any activity we suspect to be fraudulent

We also use the information we hold to improve our services and customer service. This may be achieved through activities such research, behavioural analytics, and planning and developing products.

Logged in members with a Club Jetstar membership or My Jetstar account who use jetstar.com

We may use this information we collect when members are logged in and using jetstar.com to monitor the use of, and improve, the information and functions on jetstar.com. We may also use the information to understand your preferences and provide you with information about our products and services and our partners' products and services which we think may interest you.

Disclosure of your personal information

We may disclose your information to partner airlines, and non-airline program partners for the purposes outlined in this Privacy Policy.

We may disclose your information to:

Providers of goods and services to members of Club Jetstar

Service providers for Club Jetstar

They may use the information to assist us with Club Jetstar. Such activities may include:

We may also disclose your personal information in the course of investigating any activity we suspect to be fraudulent.

How we use cookies

Cookies are small pieces of data stored on the web browser on your computer. This website and associated websites (including those you reach by clicking on advertising) may store cookies on your web browser.

How we hold information and keep it secure

IT Security

We hold your personal information in a combination of hard copy and electronic files. We use third party information system providers who may store or have access to your personal information.

When you book flights or access information about your membership of our programs and clubs, a secure server is used. Secure Sockets Layer (SSL) encrypts the information you send through this website.

No data transmission over the Internet or website can be guaranteed to be secure from intrusion. However, we maintain physical, electronic and procedural safeguards to protect your personal information in accordance with data protection legislative requirements and industry standards.

If we have given you (or you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential and for complying with any other security procedures notified to you. We require that you do not disclose your passwords to anyone else.

Disclosure of information across borders

When we disclose personal information in accordance with this Privacy Policy, it may be accessed from, transferred to, and/or stored outside the country in which you are located and outside of Australia. The data protection laws in that country may be of a lower standard than those in your own country. We will, in all circumstances, safeguard the personal information as set out in this Privacy Policy.

In the course of providing our services and facilitating reservations made through us

As a provider of travel and reservations services, we may disclose your information to countries where you travel or send freight to, or in which you have reserved services such as car hire or accommodation. This includes countries through which you are transiting and travel on flights operated by other airlines. In addition, your information may be disclosed to countries in which the providers of the services you have reserved operate or have their headquarters located.

We also have call centre and other customer service and system support providers for Jetstar in the Philippines, China, Vietnam, Indonesia and Japan.

Our service providers

We may also disclose your personal information to data processors (including operators of global travel distribution systems and reservation systems), customer service providers, and managers of our credit and financial products. The countries in which these third parties are located include the United Kingdom, Australia, the United States, Germany, France, Singapore, Japan, Vietnam and the Philippines.

Access to, and correction of, information about you

In some countries you have the right to access, or correct, the personal information that we hold about you. If you would like to request access to, or correction of, your personal information that we hold, please contact us using the details in the section titled Contacting Us.

To the extent required by applicable law, we will provide you with access to the information we hold about you, including for the purpose of correcting or updating that information, within a reasonable timeframe (or any time frame stipulated by the laws that apply to your request). If we are permitted to withhold some of your personal information and we choose to do so, we will advise you when responding to your request. If we refuse to provide you with access to, or to amend, the information, (for example, if we are permitted to refuse access because granting access would interfere with the privacy of others or if it would result in a breach of confidentiality) to the extent required we will notify you in writing of our reasons for the refusal and how you may complain about the refusal.

Where permitted by law, we may recover from you our reasonable costs of supplying you with access to this information. However, we will not charge you for the making of the request or to correct or update your personal information. Club Jetstar members and logged in members with a My Jetstar account who use jetstar.com can update their profile information online or by contacting us as set out in the Contacting Us.

Privacy complaints and further information

If you have a concern about your privacy or you have any query on how your personal information is collected or used please contact us using the details below. We will treat your complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint to discuss your concerns and outline options regarding how they may be resolved. We will aim to ensure that your complaint is resolved in timely and appropriate manner.

If you are not satisfied with our response, you may also contact the body responsible for administering the privacy laws in your country. If you are in Australia, you can contact the Office of the Australian Information Commissioner.

European data protection laws

This section applies if you are based in the European Economic Area (EEA) during your interactions with us (other than when you are in the EEA solely for travel purposes) and sets out the additional information that we are required to provide to you under European data protection laws.

Under European data protection laws, use of personal information must be based on one of a number of legal grounds and we are required to set out the grounds in respect of each use. Companies may process personal data only when the processing is permitted by the specific legal ground set out in the law.

In the table below, we have set out the relevant grounds that apply to each purpose of data processing that is mentioned in this Privacy Policy. You can find an explanation of each of the legal grounds for use of personal information here.

- legitimate interests (to allow us to provide you with the content and services on our website)

Legal grounds for use of personal information

The principal legal grounds for our use of your personal information are as follows:

Consent: where you have consented to our use of your information (you will have been presented with a consent form in relation to any such use and may withdraw your consent).

Contract performance: where we are required to collect and handle your personal information in order to provide you with the services that we have contractually agreed to provide to you, e.g. where you have booked a flight with us or the use of our freight service.

Legal obligation: where we need to use your personal information to comply with our legal obligations.

Vital interests: where we need to process your personal information in order to protect the vital interests of you or another natural person, e.g. where you require urgent assistance.

Public interest: where we need to process your personal information in order to carry out a task that is in the public interest.

Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.

The legal grounds for our use of the sensitive categories of personal information are:

Consent: where you have explicitly consented to our use of your personal information. You may withdraw your consent to the use of your personal information.

Vital interest: where we need to process your personal information in order to protect the vital interests of you or another natural person where you or the other person is physically or legally incapable of giving consent.

Legal claims:where your personal information is necessary for us to establish, exercise or defend any legal claims.

Substantial public interest: where we need to process your personal information for reasons of substantial public interest set out in EU law or the laws of the member state in which you are based.

Public interest in area of public health: where we need to process your personal information for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health, set out in EU law or the laws of the member state in which you are based.

Disclosure of information outside the EEA

Your personal information will be transferred to, and accessed in, countries outside of the EEA and we may be required by law to take specific measures to safeguard this personal information. Certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal information from the EEA to these jurisdictions. In countries which have not had these approvals, we will use appropriate safeguards to protect any personal information being transferred, such as EU Commission-approved model contractual clauses or binding corporate rules permitted by applicable legal requirements.

Please refer to the section Contacting Us if you would like to see a copy of the specific safeguards applied to the export of your personal information.

Retention period

Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the information was collected, and any other permissible, related purpose. For example, we may retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired, or to comply with regulatory requirements regarding the retention of such data. When personal data is no longer needed, we either securely destroy it, or irreversibly anonymise the data (and we may further retain and use the anonymised information).

Marketing

You have the right to ask us not to process your personal information for marketing purposes. We will inform you if we intend to use your information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by not opting in when we invite you to participate in our marketing activities. You can also exercise the right by contacting us as set out in the Contacting Us section below or by managing your marketing preferences at “My Profile” if your profile is registered on our website.

Additional Rights Under EU Law

In addition to the rights outlined elsewhere in this Privacy Policy, under certain conditions you may have the right under EU data protection law to ask us to:

provide you with further details on how we use and process your personal information;

delete personal information we no longer have grounds to process; and

restrict how we process your personal information while we consider an inquiry you have raised.

In addition, under certain conditions, you have the right to:

where processing is based on consent, withdraw the consent;

lodge a complaint with a supervisory authority;

object to any processing of personal information that we process on the “legitimate interests” or “public interests” grounds, unless our reasons for the underlying processing outweighs your interests, rights and freedoms; and

object to direct marketing (including any profiling for such purposes) at any time.

You can exercise these rights by contacting us at the Contacting Us section below.

These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).